Join Sean Colins for an in-depth discussion in this video DEP enrollment preparation, part of Mobile Device Management with Meraki: Managing iPads.
- [Voiceover] As you might expect, it's important to be prepared before going into the enrollment process for all of these programs. If that's surprising to you, you probably haven't enrolled in a lot of Apple programs before because there are some unique gotchas associated with enrolling in Apple programs sometimes. And it's a good idea to get your ducks in a row ahead of that. So let's take a look at what's necessary for you to prepare yourself for enrollment in Apple's deployment programs. So first, there's a checklist for getting your emails set up.
You're going to set up some form of organization identity email address. And it's important that the email address is set up within the actual domain your organization owns and not some other domain because domain ownership is currently used by Apple as part of their verification process. Also, within this email checklist, you're gonna set up an email delivery group so that if you send an email to that address, it can go to a group of people within your organization. You're gonna test any email addresses that you wish to use and make sure 100% that you can receive emails that are sent from Apple at that email address.
What do we need to do after that email is created? Well, you're going to create a VPP-only admin and that is going to be able to create additional administrators that can do things with specific programs. So for example, if you sign up for VPP first or DEP first, once you get into the overarching program website, you'll be able to go in and whichever programs you've enrolled in, either the Volume Purchase Program, the Device Enrollment Program, or the Apple ID for Students program, also fondly known as the U13 Program.
Those will be listed there, and you'll be able to create new admin accounts within the system that can use either one, or all, or a couple of those different programs, and be administrators for them. It's very important that you realize that you can separate that out. This can help you later on, especially when you think about the Volume Purchase Program because this is a purchasing admin. And if you're s district and you're setting up a whole, district-wide purchasing system, you may want to create different Volume Purchase Program administrators for each of the different campuses, or maybe you've got different programs within the school district, and you want to keep those things separate just for convenience or ease of administration.
Now, some gotchas. You're never going to use a personal Apple ID or ever use the Apple ID that you create during this enrollment process for an iCloud account or an iTunes account. It'll break the whole system. And also, you're not going to re-invite an admin after created, because you can't. So you want to be sure, this is why I've mentioned this before about the email account, you want to be really sure that that email works, so that when Apple sends the invitation to that email address, it actually goes in there.
You can't re-invite, you can't change the account once it's created, and you also can't delete them at the time of this recording, so choose wisely. All logins for administrators on these deployment accounts require two-step verification. So be ready with a device that can be used for two-step verification whenever you're at the point where you're creating the Apple IDs. That device should also be available to the administrator that will have to log in with that Apple ID because whenever that administrator wants to log in, the system will request that they get that two-step verification four digit code, and enter it into the website so that they can continue the login process.
The next thing, the first name that you use to enroll in this account will always be used with that account. Even though that name is associated with an Apple ID and you can go to the management of Apple ID's website and change that first and last name associated with the Apple ID, you'll notice that when you go back to the deployment website, that name is back to the original one that was used for setup. And then if you go back to manage your Apple ID, the first and last name are right back to where you started again.
It will not allow you to permanently change that first and last name at the time of this recording. So choose wisely. Make sure that the person who's setting this up is someone who's gonna be with your organization for a long, long time.
The first steps involve preparation: purchase planning, Apple enrollment, and expanding your Wi-Fi network to serve a large number of new mobile devices. Sean then reviews the merits of different MDM software. He shows how to configure push notifications, set up profiles that control iOS functionality, and shows you how to find and install apps. He then examines the setup process from the user's perspective and explores alternatives to mobile device management, such as app-less deployment and a simple hands-off approach to device management.
- Planning purchases
- Purchasing Apple equipment for the Device Enrollment Program (DEP)
- Enrolling in DEP
- Planning to increase Wi-Fi capacity and coverage
- Setting up Meraki
- Linking devices to MDM
- Creating and configuring MDM profiles
- Setting up an iPad that's been zero-touch deployed
- Examining alternatives to MDM